In our environment, we have MANY responsibilities which are labled as "query only," "inquiry," or "view only." We are wanting to determine the most efficient way to test these responsibilities so we can without a doubt say that they are truly query only and provide no ability to write/update. What are your experiences, comments, and solutions regarding this situation?

Well the problem there is that our environment is so large that we cannot just restrict the responsibilities as we might lose a critical function for hundreds of people. If one were to look at the code for a Form related to a responsibility, would we be able to cover all our bases and determine if the responsibility were query only?